Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/ftmIJr_MTCxKpewQoB7JvJpHq-Y.roa
File: ftmIJr_MTCxKpewQoB7JvJpHq-Y.roa (raw, json)
Hash identifier: SOiRo0SXLYixrcGeLiC8X0J4/syGP8wufyWCA/h2HHE=
Subject key identifier: 7E:D9:88:26:BF:CC:4C:2C:4A:A5:EC:10:A0:1E:C9:BC:9A:47:AB:E6
Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial: 0BEA4535
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/ftmIJr_MTCxKpewQoB7JvJpHq-Y.roa
Signing time: Sat 01 Jan 2022 07:58:40 +0000
ROA not before: Sat 01 Jan 2022 07:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209459
IP address blocks: 185.143.232.0/22 maxlen: 24
193.176.240.0/22 maxlen: 24
185.97.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199902517 (0xbea4535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Validity
Not Before: Jan 1 07:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ed98826bfcc4c2c4aa5ec10a01ec9bc9a47abe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:b6:3a:9c:12:94:c0:c2:a6:39:9b:ae:7d:
01:36:e7:6d:6d:ec:cc:99:c8:14:ce:86:60:ac:15:
1f:35:36:67:d1:07:5a:4a:7e:c5:06:cb:47:29:fa:
a5:8d:3e:81:87:8c:00:e3:c7:3f:6a:19:5e:c4:05:
74:00:02:e3:3b:a4:1d:46:be:9f:fc:16:27:dd:67:
9e:43:ec:9d:bd:32:6d:26:fe:3d:a4:d7:2a:e9:9a:
d7:5d:09:4a:5f:9a:10:d5:e5:a2:58:ea:1c:d9:5c:
ab:35:02:ad:cd:cb:a5:bd:54:f4:ce:59:b0:ea:10:
7a:9c:96:0d:5f:60:b6:a3:74:af:b1:3e:40:08:67:
8d:48:30:74:f3:d6:76:76:bd:78:ae:e1:03:7e:9c:
4c:86:d9:c0:2f:29:4c:57:44:10:0c:94:04:17:c5:
67:92:61:00:e7:a7:03:fc:57:0b:ed:bc:0a:b6:e6:
32:ad:19:99:34:ee:a5:78:97:c1:e9:9f:25:9d:8b:
1a:bc:79:2a:2e:f2:cf:47:0b:a8:d2:0c:96:ff:ea:
ee:ba:a4:6f:e4:f0:9d:2d:98:2c:8a:66:cc:72:da:
2d:4f:c9:ca:e7:14:0f:9d:28:37:be:07:b0:6c:f3:
5d:ae:1a:5b:f5:c0:b6:e8:26:53:94:57:c3:df:f1:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D9:88:26:BF:CC:4C:2C:4A:A5:EC:10:A0:1E:C9:BC:9A:47:AB:E6
X509v3 Authority Key Identifier:
keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/ftmIJr_MTCxKpewQoB7JvJpHq-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.116.0/22
185.143.232.0/22
193.176.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:10:56:47:64:6e:5d:28:20:93:df:05:37:dc:dd:a1:2b:63:
0b:5c:cf:14:fa:a7:51:a7:24:8b:61:f4:42:bd:9e:26:1e:dd:
b0:47:cb:9e:7f:a4:17:95:5b:42:36:8b:0c:81:b9:07:36:da:
8b:29:13:09:ad:ec:5d:ba:8e:ad:e5:96:01:a9:f8:2b:29:3b:
d9:3f:98:6d:42:b5:23:b1:ce:33:ca:7c:c5:13:44:79:3d:5b:
28:d3:c8:93:ab:3d:9e:19:6b:7e:5e:e1:71:ae:a0:37:52:d1:
4d:8b:f3:51:7b:9a:03:a3:5c:3b:52:42:52:3a:3d:61:26:2f:
82:32:dd:7d:e5:6c:c1:6d:c3:bc:b9:13:d2:f2:4e:fa:ef:3b:
aa:6d:9a:1a:7c:6c:ff:79:30:a7:ee:eb:40:7c:7f:c6:2d:66:
92:b1:8b:b5:0d:90:5b:6c:df:50:54:20:89:d1:f2:c3:7f:f0:
38:02:32:24:7f:4d:15:c1:88:08:da:ba:4d:52:14:b2:5e:78:
63:ed:a0:13:c5:ac:d5:ef:c6:50:7c:c6:73:8a:2f:89:50:38:
91:62:bf:40:bd:5f:87:f8:28:ae:f6:f2:1a:ce:9b:d2:bc:58:
5a:f8:0e:eb:2d:1b:bf:5a:a5:4d:b7:1f:c5:c0:96:a9:47:14:
d7:7f:76:0d
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEC+pFNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NWMzNzFmM2EzNGFiZjE5NTdkMTg5NWRmODA2M2Y0ZDYyMDdlYzAyMB4XDTIyMDEw
MTA3NTg0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2VkOTg4MjZiZmNj
NGMyYzRhYTVlYzEwYTAxZWM5YmM5YTQ3YWJlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKTJtjqcEpTAwqY5m659ATbnbW3szJnIFM6GYKwVHzU2Z9EH
Wkp+xQbLRyn6pY0+gYeMAOPHP2oZXsQFdAAC4zukHUa+n/wWJ91nnkPsnb0ybSb+
PaTXKuma110JSl+aENXloljqHNlcqzUCrc3Lpb1U9M5ZsOoQepyWDV9gtqN0r7E+
QAhnjUgwdPPWdna9eK7hA36cTIbZwC8pTFdEEAyUBBfFZ5JhAOenA/xXC+28Crbm
Mq0ZmTTupXiXwemfJZ2LGrx5Ki7yz0cLqNIMlv/q7rqkb+TwnS2YLIpmzHLaLU/J
yucUD50oN74HsGzzXa4aW/XAtugmU5RXw9/xlI8CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBR+2Ygmv8xMLEql7BCgHsm8mker5jAfBgNVHSMEGDAWgBT1w3Hzo0q/GVfR
iV34Bj9NYgfsAjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzljTng4Nk5LdnhsWDBZbGQtQVlfVFdJSDdBSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvNWIwY2Q5LWUyNzktNDZhYS04MWRhLTFiYjE3YThiMjZmZS8x
L2Z0bUlKcl9NVEN4S3Bld1FvQjdKdkpwSHEtWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
NWIwY2Q5LWUyNzktNDZhYS04MWRhLTFiYjE3YThiMjZmZS8xLzljTng4Nk5Ldnhs
WDBZbGQtQVlfVFdJSDdBSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEArlhdAMEArmP6AMEAsGw8DANBgkq
hkiG9w0BAQsFAAOCAQEAehBWR2RuXSggk98FN9zdoStjC1zPFPqnUacki2H0Qr2e
Jh7dsEfLnn+kF5VbQjaLDIG5BzbaiykTCa3sXbqOreWWAan4Kyk72T+YbUK1I7HO
M8p8xRNEeT1bKNPIk6s9nhlrfl7hca6gN1LRTYvzUXuaA6NcO1JCUjo9YSYvgjLd
feVswW3DvLkT0vJO+u87qm2aGnxs/3kwp+7rQHx/xi1mkrGLtQ2QW2zfUFQgidHy
w3/wOAIyJH9NFcGICNq6TVIUsl54Y+2gE8Ws1e/GUHzGc4oviVA4kWK/QL1fh/go
rvbyGs6b0rxYWvgO6y0bv1qlTbcfxcCWqUcU1392DQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org